EDIT: By the way, it seems that the user profile page does not show whether the user is banned.
The PoPUW forum had a separate "rank" for this, called "I have been permanently banned".

I found a little difference that shows if a user is banned: profiles of banned users don't show the "send PM" link.
Compare our newest banned user with someone who is not banned.
This can also be seen next to posts: It's the "Contact" that disappears for banned users.

Unfortunately we still got the usual "PC Games" spam from India, and some other as well.

The extension has a threshold setting:

Stop Forum Spam threshold:
The extension will check against a threshold (e.g., the number of times a user name, email or IP address is found within the stop forum database). You can input any number between 1 and 99. The lower the number the greater the possibility of a false positive.

I lowered this setting from 5 to 2. Hopefully that helps a bit.
I could lower it further down to 1, if they still come through.
There is a risk of false positives, so I also enabled the option for adding an entry to the administrator log, whenever the extension blocks someone trying to create an account. (And I am curious how many (if any) spammers the extension actually stops!)

Hm, I don't see any new buttons, and I'm logged in and did a hard reload of the page (Ctrl+Shift+r using Firefox).
Still just the ! and " buttons. Maybe it's a rights issue; only admins/mods can see it?

Hm, I don't see any new buttons, and I'm logged in and did a hard reload of the page (Ctrl+Shift+r using Firefox).
Still just the ! and " buttons. Maybe it's a rights issue; only admins/mods can see it?

Yeah, it looks like the buttons only appear for moderators/admins.
Makes sense, because the makers really want to stop people from adding non-spammers to the database:

Stop Forum Spam wrote:Note - By signing up for an API key, you agree not to be malicious by adding people you just don't like etc. This will get you banned, your servers banned and the possiblity of being listed in the database yourself.

The extension will check against a threshold (e.g., the number of times a user name, email or IP address is found within the stop forum database)

Unfortunately, these spammers seem to use a different username and IP address every time... (I don't know about the email.)
It would probably be more useful if spam filtering worked by the contents of the post, as for e-mails.

Unfortunately, these spammers seem to use a different username and IP address every time...

Lately, the username seems to always have the <letters><yyyy> format though. We could alter the forum's PHP code to block these? Although I still think that the users not being removed completely might be the main cause of the spammer's continued presence. From the bot's perspective, the non-deleted profiles' signatures do still spread the spammer's game's name (example, example). I probably wrote this before, but, back in the day, when I ran into spam, consistently deleting the spammers' profiles and banning their IP's did make the spam stop.

EDIT: Another approach would be to block a registration if its IP resolves to <something>.alliancebroadband.in, as they all seem to be coming from there.
I have already tried that in the past, but the forum didn't support it: viewtopic.php?p=22094#p22094

From the bot's perspective, the non-deleted profiles' signatures do still spread the spammer's game's name (example, example). I probably wrote this before, but, back in the day, when I ran into spam, consistently deleting the spammers' profiles and banning their IP's did make the spam stop.

I think Falcury deleted most of the spammer accounts, your two examples are probably the only remaining ones.

EDIT: Actually, there are a few more suspicious usernames (the first 7 or so rows here), but most have no posts and no signature.
It seems that some of them haven't even logged in yet.
They might be "sleeper agents" who wait for some indeterminate amount of time before spamming.

EDIT: Actually, there are a few more suspicious usernames (the first 7 or so rows here), but most have no posts and no signature.
It seems that some of them haven't even logged in yet.
They might be "sleeper agents" who wait for some indeterminate amount of time before spamming.

I deleted some the most suspicious ones (some of them were spelling variations of the same name), and forced reactivation on some of the newest ones. (If those remain inactive, I'll delete them in a month or so. Seeing as these also originate from a suspicious IP range, they're almost certainly spam accounts...)